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CLAIMS 



1. Method for operating a conditional access system 
for broadcast applications, said conditional access system 
comprising a number of subscribers, each subscriber having a 
terminal including a conditional access module and a secure 
device for storing entitlements, wherein a source signal is 
encrypted using a first key (C„) , said first key (C w ) being 
changed at a high rate, said encrypted source signal being 
broadcasted for receipt by the terminals, wherein entitlement 
control messages (ECM's) are sent to the secure devices, said 
ECM's comprising the first keys (C w ) encrypted using a service 
key (p T ) , wherein entitlement management messages (EMM 1 s) are 
sent to the secure device providing the service key (P T ) re- 
quired to decrypt encrypted first keys (C w ) , wherein a cracked 
secure device which is used in an unauthorised manner is 
traced by sending different keys required to obtain the first 
keys to different terminals or groups of terminals and moni- 
toring the key information provided by a pirate, character- 
ized in that search EMM's are sent to at least a part of the 
terminals, said search EMM's providing at least the service 
key (P T ) and a dummy key (P D1 or P D2 ) , at least the search 
EMM's comprising identifiers identifying the keys (P T and P D1 
or P D2 ) , wherein first search EMM's with the keys (P T and P D1 ) 
are sent to a first part of the terminals and second search 
EMM's with the keys (P T and P D2 ) are sent to a second part of 
the terminals, wherein an ECM identifying the service key <P T ) 
to be used to decrypt the encrypted first key (c„) , is sent to 
all secure devices just before the first key (c w ) is needed to 
decrypt the source signal. 

2. Method according to claim 1, wherein the en- 
crypted source signal comprises a stream of data packets, 
wherein successive groups including at least one data packet, 
are encrypted using successive first keys ( C W1 , C W2 , ... , C wi ,..., 
C Wn ) , each data packet having a flag indicating the first key 
(C W j) to be used for decrypting the data packet, wherein in 
stead of an ECM identifying the service key (P T ) an ECM iden- 
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tifying a dummy key (P D1 or P D2 ) to be used to decrypt a next 
encrypted first key (C wi ) , is sent to the secure devices of 
the first and second parts of the terminals, respectively, 
just before the first key (Cwi) is needed to decrypt the 
5 source signal, whereas the data packet is encrypted using the 
previous first key(C W i-i) . 

3. Method according to claim 1 or 2, wherein a set 
of search EMM's is sent to the terminals, each search EMM 
providing two keys (P T and P Di , P T and P D 2/- f Pt and P Dn ) . 
10 4. Method according to the preamble of claim 1, 

wherein a set of search EMM's is sent to at least a part of 
f =. the terminals, each search EMM of the set comprising a dif- 
yl ferent dummy key (P D ) and each EMM being sent to a different 
ff part of the terminals. 

J3-5 5. Method according to claim 3 or 4 , wherein the 

!j terminals are divided into groups, wherein in a first search 
m step the number of search EMM's of the set of search EMM's 
^ corresponds to the number of groups . 

nj 6. Method according to the preamble of claim 1, 

CEO wherein the source signal or the ECM's are encrypted using a 
;5J multiple -key or secret -sharing cryptographic algorithm having 
fy a plurality of different decrypting keys or shares (Ci;Pi) re- 
quired for decrypting the encrypted source signal or ECM's, 
respectively, wherein said plurality of different decrypting 
25 keys or shares {Ci;Pi) are sent to at least a part of the ter- 
minals such that different terminals or groups of terminals 
receive different keys or shares (Ci;Pi) according to a prede- 
termined distribution. 

7 . Method according to any one of the preceding 
30 claims, wherein the distribution of the terminals in groups 
of terminals is varied to trace the cracked secure device. 



